AI LAW RADAR · Daily Last verified 29 Aug 2026

The whole book, folded to a page.

The Register

176 obligations across 72 jurisdictions — 131 in force, 39 with a set date, 6 proposed. Open a jurisdiction for its one-line register; every row keeps its date, roles, confidence, primary source and checked date. Largest registers first.

US United States 57 tracked Alabama AI Health Insurance Transparency Act (SB 63) next 1 Oct 2026
  1. in force since 1 Jan 2023 US · NYC NYC Local Law 144 — AEDT bias audit hiring · deployer ✓ high · nyc.gov ↗ · checked 13 Aug 2026
  2. in force since 19 May 2025 US · Federal TAKE IT DOWN Act deployer · chatbot ✓ high · congress.gov ↗ · checked 13 Aug 2026
  3. in force since 1 Oct 2025 US · MD Maryland AI Utilization Review Requirements (HB 820 / Ch.747) deployer ✓ high · mgaleg.maryland.gov ↗ · checked 13 Aug 2026
  4. in force since 5 Nov 2025 US · NY AI Companion Models Law (GBL Art. 47) chatbot ✓ high · nysenate.gov ↗ · checked 13 Aug 2026
  5. in force since 11 Dec 2025 US · NY New York Deceased Performer Digital Replica Consent Law (S.8391 / Ch. 616) provider · deployer ✓ high · nysenate.gov ↗ · checked 13 Aug 2026
  6. in force since 1 Jan 2026 US · CA AB 2013 — GenAI training-data transparency provider ✓ high · leginfo.legislature.ca.gov ↗ · checked 13 Aug 2026
  7. in force since 1 Jan 2026 US · CA California Extends Health-Profession Title-Protection Law to AI (AB 489) provider · deployer ✓ high · leginfo.legislature.ca.gov ↗ · checked 14 Aug 2026
  8. in force since 1 Jan 2026 US · CA California companion-chatbot safeguards (SB 243) chatbot ✓ high · leginfo.legislature.ca.gov ↗ · checked 13 Aug 2026
  9. in force since 1 Jan 2026 US · CA SB 53 — Frontier AI Transparency Act provider ✓ high · leginfo.legislature.ca.gov ↗ · checked 13 Aug 2026
  10. in force since 1 Jan 2026 US · IL Illinois AI in employment (HB 3773) hiring · deployer ✓ high · ilga.gov ↗ · checked 13 Aug 2026
  11. in force since 1 Jan 2026 US · OR Oregon Bars Nonhuman Entities from Nursing Titles (HB 2748) provider · deployer ✓ high · oregonlegislature.gov ↗ · checked 14 Aug 2026
  12. in force since 1 Jan 2026 US · TX Texas Responsible AI Governance Act (TRAIGA) provider · deployer ✓ high · capitol.texas.gov ↗ · checked 13 Aug 2026
  13. in force since 23 Apr 2026 US · DE Delaware AI Agents Barred from Medical/Nursing Licensure and Titles (HB 191) provider · deployer ✓ high · legis.delaware.gov ↗ · checked 14 Aug 2026
  14. in force since 22 May 2026 US · TN Tennessee AI regulation study mandate (SB 1700 / PC 1082, "CHAT Act") provider · deployer ✓ high · wapp.capitol.tn.gov ↗ · checked 13 Aug 2026
  15. in force since 9 Jun 2026 US · NY New York Synthetic Performer Disclosure Law (S.8420-A / Ch. 617) deployer ✓ high · nysenate.gov ↗ · checked 13 Aug 2026
  16. in force since 11 Jun 2026 US · WA Washington Bars Nonhuman Entities from Nursing Titles (HB 2155) provider · deployer ✓ high · lawfilesext.leg.wa.gov ↗ · checked 14 Aug 2026
  17. in force since 11 Jun 2026 US · WA Washington Prior Authorization AI Transparency Act (SB 5395) deployer ✓ high · app.leg.wa.gov ↗ · checked 13 Aug 2026
  18. in force since 11 Jun 2026 US · WA Washington Forged Digital Likeness Protection Act (SB 5886 / Ch.69) provider · deployer ✓ high · app.leg.wa.gov ↗ · checked 13 Aug 2026
  19. in force since 22 Jun 2026 US · RI Rhode Island Oversight of AI in Mental Health Care Act (H 7349 Sub A) deployer · provider ✓ high · webserver.rilegislature.gov ↗ · checked 13 Aug 2026
  20. in force since 22 Jun 2026 US · RI Rhode Island Healthcare AI Documentation Act (H 7538) deployer ✓ high · webserver.rilegislature.gov ↗ · checked 13 Aug 2026
  21. in force since 1 Jul 2026 US · IA Iowa AI Prior Authorization Restrictions (HF 2635) deployer ✓ high · legis.iowa.gov ↗ · checked 13 Aug 2026
  22. in force since 1 Jul 2026 US · IA Iowa Conversational AI Safety Act (SF 2417) chatbot · deployer ✓ high · legis.iowa.gov ↗ · checked 13 Aug 2026
  23. in force since 1 Jul 2026 US · IN Indiana AI Healthcare Claims Disclosure Act (HB 1271 / PL 88) deployer ✓ high · iga.in.gov ↗ · checked 13 Aug 2026
  24. in force since 1 Jul 2026 US · TN Tennessee AI Mental Health Impersonation Act (SB 1580 / PC 647) deployer · provider ✓ high · wapp.capitol.tn.gov ↗ · checked 13 Aug 2026
  25. in force since 14 Jul 2026 US · HI Hawaii Deepfake Protection & Synthetic Performer Disclosure Act (HB 2137 / Act 247) deployer ✓ high · data.capitol.hawaii.gov ↗ · checked 13 Aug 2026
  26. in force since 14 Jul 2026 US · HI Hawaii AI Disclosure and Safety Act (SB 3001 / Act 248) chatbot · deployer ✓ high · data.capitol.hawaii.gov ↗ · checked 13 Aug 2026
  27. in force since 2 Aug 2026 US · CA California AI Transparency Act (SB 942) provider · chatbot ✓ high · leginfo.legislature.ca.gov ↗ · checked 13 Aug 2026
  28. in force since 12 Aug 2026 US · CO Colorado Psychotherapy AI Restrictions (HB 26-1195) deployer ✓ high · leg.colorado.gov ↗ · checked 27 Aug 2026
  29. T−33 · 1 Oct 2026 US · AL Alabama AI Health Insurance Transparency Act (SB 63) deployer ✓ high · alison.legislature.state.al.us ↗ · checked 23 Aug 2026
  30. T−33 · 1 Oct 2026 US · CT Connecticut PA 26-15 (SB 5) tranche 1 — subscription AI, frontier models, synthetic content, state agencies provider · deployer ✓ high · cga.ct.gov ↗ · checked 23 Aug 2026
  31. T−33 · 1 Oct 2026 US · MD Maryland Deepfake Identity Fraud (SB 8 / Ch. 445) all roles ✓ high · mgaleg.maryland.gov ↗ · checked 23 Aug 2026
  32. T−125 · 1 Jan 2027 US · CA CA AB 2148 — K-12 School Employees and Contractors Must Be Natural Persons (AI Barred from Staff Roles) hiring · deployer ✓ high · leginfo.legislature.ca.gov ↗ · checked 23 Aug 2026
  33. T−125 · 1 Jan 2027 US · CA California AI Transparency Act — AB 853 large online platform & GenAI hosting platform duties provider · deployer ✓ high · leginfo.legislature.ca.gov ↗ · checked 23 Aug 2026
  34. T−125 · 1 Jan 2027 US · CO Colorado Healthcare AI Utilization Review Act (HB 26-1139) deployer ✓ high · leg.colorado.gov ↗ · checked 23 Aug 2026
  35. T−125 · 1 Jan 2027 US · CO Colorado Conversational AI Safety Act (HB 26-1263) chatbot · deployer ✓ high · leg.colorado.gov ↗ · checked 27 Aug 2026
  36. T−125 · 1 Jan 2027 US · CO Colorado AI Act (SB 26-189) deployer ✓ high · leg.colorado.gov ↗ · checked 27 Aug 2026
  37. T−125 · 1 Jan 2027 US · CT Connecticut PA 26-15 (SB 5) tranche 2 — AI companion safeguards provider · chatbot ✓ high · cga.ct.gov ↗ · checked 23 Aug 2026
  38. T−125 · 1 Jan 2027 US · GA Georgia AI Prior Authorization Act (SB 444) deployer ✓ high · gov.georgia.gov ↗ · checked 23 Aug 2026
  39. T−125 · 1 Jan 2027 US · IL Illinois AI Teacher Evaluation Restrictions (SB 2909 / PA 104-0565) deployer ✓ high · ilga.gov ↗ · checked 23 Aug 2026
  40. T−125 · 1 Jan 2027 US · IL Illinois Artificial Intelligence Safety Measures Act (SB 315 / PA 104-0538) provider ✓ high · ilga.gov ↗ · checked 23 Aug 2026
  41. T−125 · 1 Jan 2027 US · NY RAISE Act — frontier AI safety provider ✓ high · nysenate.gov ↗ · checked 23 Aug 2026
  42. T−125 · 1 Jan 2027 US · OR Oregon AI Companion Act (SB 1546 / Ch.85) chatbot · deployer ✓ high · olis.oregonlegislature.gov ↗ · checked 23 Aug 2026
  43. T−125 · 1 Jan 2027 US · RI Rhode Island AI Chatbot Safety Act (S 2195) chatbot · deployer ✓ high · webserver.rilegislature.gov ↗ · checked 23 Aug 2026
  44. T−125 · 1 Jan 2027 US · UT Utah AI Prior Authorization Disclosure Act (SB 319) deployer ✓ high · le.utah.gov ↗ · checked 23 Aug 2026
  45. T−125 · 1 Jan 2027 US · WA Washington AI Companion Chatbot Safety Act (HB 2225 / Ch.168) chatbot · deployer ✓ high · app.leg.wa.gov ↗ · checked 23 Aug 2026
  46. T−156 · 1 Feb 2027 US · WA Washington AI Content Disclosure Act (HB 1170 / Ch.167) provider · deployer ✓ high · app.leg.wa.gov ↗ · checked 23 Aug 2026
  47. T−306 · 1 Jul 2027 US · GA Georgia Conversational AI Safety Act (SB 540) chatbot · deployer ✓ high · legis.ga.gov ↗ · checked 13 Aug 2026
  48. T−306 · 1 Jul 2027 US · ID Idaho Conversational AI Safety Act (SB 1297) chatbot · deployer ✓ high · legislature.idaho.gov ↗ · checked 13 Aug 2026
  49. T−306 · 1 Jul 2027 US · NE Nebraska Conversational Artificial Intelligence Safety Act (LB 525) deployer ✓ high · nebraskalegislature.gov ↗ · checked 13 Aug 2026
  50. T−306 · 1 Jul 2027 US · NJ NJ FAIR Act — Algorithmic Rent-Setting Ban (A3497/S451) deployer · provider ✓ high · pub.njleg.gov ↗ · checked 13 Aug 2026
  51. T−398 · 1 Oct 2027 US · CT Connecticut PA 26-15 (SB 5) tranche 3 — automated employment-related decision technology provider · deployer · hiring ✓ high · cga.ct.gov ↗ · checked 12 Aug 2026
  52. T−490 · 1 Jan 2028 US · CA California AI Transparency Act — AB 853 capture device latent disclosures provider ✓ high · leginfo.legislature.ca.gov ↗ · checked 13 Aug 2026
  53. T−490 · 1 Jan 2028 US · CT Connecticut PA 26-15 (SB 5) tranche 4 — covered-platform restrictions for minors provider · deployer ✓ high · cga.ct.gov ↗ · checked 12 Aug 2026
  54. T−490 · 1 Jan 2028 US · IL Illinois Transparency in Downcoding Act (SB 3114 / PA 104-0568) deployer ✓ high · ilga.gov ↗ · checked 13 Aug 2026
  55. proposed · 1 Oct 2026 US · MD Maryland Protection From Predatory Pricing Act (HB 895 / Ch. 154) deployer ✓ high · mgaleg.maryland.gov ↗ · checked 23 Aug 2026
  56. proposed US · Federal AI Kill Switch Act (Lieu-Moran) provider ✓ high · govinfo.gov ↗ · checked 13 Aug 2026
  57. proposed US · IL Illinois AI Rental Price Coordination Ban (SB 343) deployer · provider ✓ high · ilga.gov ↗ · checked 13 Aug 2026
EU European Union 12 tracked Art. 50(2) marking retrofit — synthetic-content systems placed on the market before 2 Aug 2026 next 2 Dec 2026
  1. in force since 7 Jun 2021 EU — General TDM Exception with Rightholder Opt-Out (DSM Directive Art. 4) provider ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  2. in force since 2 Feb 2025 Prohibited AI practices (Art. 5) all roles ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  3. in force since 2 Aug 2025 GPAI model provider obligations (Art. 53) — docs, copyright policy, training summary provider ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  4. in force since 2 Aug 2026 GPAI enforcement & fines (Art. 101) provider ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  5. in force since 2 Aug 2026 Article 50 transparency & deepfake labelling provider · deployer · chatbot ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  6. in force since 10 Aug 2026 EU AI Act — GPAI Enforcement Procedures Implementing Regulation (EU) 2026/1755 provider ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  7. T−95 · 2 Dec 2026 Art. 50(2) marking retrofit — synthetic-content systems placed on the market before 2 Aug 2026 provider ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  8. T−95 · 2 Dec 2026 New prohibitions — AI CSAM / intimate imagery provider · deployer ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  9. T−338 · 2 Aug 2027 GPAI models placed on the market before 2 Aug 2025 — legacy compliance deadline (Art. 111(3)) provider ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  10. T−460 · 2 Dec 2027 High-risk AI obligations (Annex III) provider · deployer ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  11. T−704 · 2 Aug 2028 EU AI Act high-risk obligations (Annex I — product-embedded) provider · deployer ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
  12. T−1434 · 2 Aug 2030 High-risk AI intended for public authorities — legacy-system compliance deadline provider · deployer ✓ high · eur-lex.europa.eu ↗ · checked 24 Aug 2026
CN China 7 tracked China PIPL Art. 24 — automated decision-making transparency, opt-out and explanation all in force
  1. in force since 1 Nov 2021 China PIPL Art. 24 — automated decision-making transparency, opt-out and explanation provider · deployer · hiring ✓ high · cac.gov.cn ↗ · checked 23 Aug 2026
  2. in force since 1 Mar 2022 CAC Algorithmic Recommendation Provisions — disclosure, opt-out and algorithm filing provider · deployer · chatbot ✓ high · cac.gov.cn ↗ · checked 23 Aug 2026
  3. in force since 10 Jan 2023 Deep Synthesis Provisions provider · chatbot ✓ high · cac.gov.cn ↗ · checked 23 Aug 2026
  4. in force since 15 Aug 2023 Generative AI Interim Measures provider · chatbot ✓ high · cac.gov.cn ↗ · checked 23 Aug 2026
  5. in force since 1 Sep 2025 AI-content labelling (+ GB 45438-2025) provider · deployer · chatbot ✓ high · cac.gov.cn ↗ · checked 23 Aug 2026
  6. in force since 8 May 2026 China AI Agents Implementation Opinions (CAC/NDRC/MIIT) provider · deployer ✓ high · cac.gov.cn ↗ · checked 24 Aug 2026
  7. in force since 15 Jul 2026 Anthropomorphic AI Interactive Services Measures provider · chatbot ✓ high · cac.gov.cn ↗ · checked 24 Aug 2026
UK United Kingdom 6 tracked UK DUAA 2025 — Automated Decision-Making reform (Arts. 22A–22D) 5 in force
  1. in force since 5 Feb 2026 UK DUAA 2025 — Automated Decision-Making reform (Arts. 22A–22D) provider · deployer ✓ high · legislation.gov.uk ↗ · checked 21 Aug 2026
  2. in force since 6 Feb 2026 UK DUAA 2025 s.138 — Non-consensual deepfake creation/request offences all roles ✓ high · legislation.gov.uk ↗ · checked 21 Aug 2026
  3. in force since 12 May 2026 UK SI 2026/425 — mandatory ICO code of practice on AI and automated decision-making provider · deployer ✓ high · legislation.gov.uk ↗ · checked 24 Aug 2026
  4. in force since 29 Jun 2026 Crime and Policing Act 2026 — AI-generated CSAM and deepfake offences provider · deployer ✓ high · legislation.gov.uk ↗ · checked 24 Aug 2026
  5. in force Sectoral regulator AI principles all roles ✓ high · gov.uk ↗ · checked 21 Aug 2026
  6. proposed AI (Regulation) Bill [HL] proposed provider · deployer ✓ high · bills.parliament.uk ↗ · checked 21 Aug 2026
BR Brazil 4 tracked Brazil ECA Digital Art. 31 — semi-annual transparency report, first due 17 September 2026 next 17 Sep 2026
  1. in force since 18 Sep 2020 Brazil LGPD Art. 20 — right to review of solely-automated decisions deployer · hiring ✓ high · planalto.gov.br ↗ · checked 14 Aug 2026
  2. in force since 17 Mar 2026 Brazil ECA Digital (Lei 15.211/2025) — algorithmic duties for services used by minors provider · deployer ✓ high · planalto.gov.br ↗ · checked 24 Aug 2026
  3. T−19 · 17 Sep 2026 Brazil ECA Digital Art. 31 — semi-annual transparency report, first due 17 September 2026 provider · deployer ✓ high · in.gov.br ↗ · checked 24 Aug 2026
  4. proposed AI Act bill (PL 2338/2023) advancing provider · deployer ✓ high · camara.leg.br ↗ · checked 12 Aug 2026
KZ Kazakhstan 4 tracked AI Law art. 17(3) — seven AI capabilities banned outright, and the owner classifies its own risk tier all in force
  1. in force since 18 Jan 2026 AI Law art. 17(3) — seven AI capabilities banned outright, and the owner classifies its own risk tier provider · deployer ✓ high · adilet.zan.kz ↗ · checked 21 Aug 2026
  2. in force since 18 Jan 2026 AI Law art. 18 — lifecycle risk management, refreshed at least yearly, and it is the penalised duty provider · deployer ✓ high · adilet.zan.kz ↗ · checked 21 Aug 2026
  3. in force since 18 Jan 2026 AI Law art. 21 — tell users AI was involved, and machine-readably mark every synthetic output you distribute provider · deployer ✓ high · adilet.zan.kz ↗ · checked 21 Aug 2026
  4. in force since 18 Jan 2026 Personal Data Law art. 19-1 — automated processing that changes your rights is banned without consent, and objections get three working days deployer · hiring ~ medium · adilet.zan.kz ↗ · checked 24 Aug 2026
RU Russia 4 tracked 243-FZ art. 10(1) — whoever lets you use a large foundational model has to tell you who owns the output next 1 Mar 2027
  1. in force since 26 Jan 2007 152-FZ art. 16 — a solely automated decision is forbidden unless the person signed a written consent deployer · hiring · provider ✓ high · pravo.gov.ru ↗ · checked 21 Aug 2026
  2. T−184 · 1 Mar 2027 243-FZ art. 10(1) — whoever lets you use a large foundational model has to tell you who owns the output provider ✓ high · publication.pravo.gov.ru ↗ · checked 21 Aug 2026
  3. T−184 · 1 Mar 2027 243-FZ art. 8 — three developer duties that attach only once a model takes sovereign or national status provider ✓ high · publication.pravo.gov.ru ↗ · checked 21 Aug 2026
  4. T−184 · 1 Mar 2027 243-FZ art. 9 — platforms above 500,000 daily users enable an AI label; nobody is made to apply one provider · deployer ✓ high · publication.pravo.gov.ru ↗ · checked 21 Aug 2026
JP Japan 3 tracked Japan Election AI Labelling & Platform Obligations (2026 Amendment) next 1 Mar 2027
  1. in force since 1 Jan 2019 Japan — AI Training / Information Analysis Exception (Copyright Act Art.30-4) provider ✓ high · laws.e-gov.go.jp ↗ · checked 24 Aug 2026
  2. in force since 1 Sep 2025 AI Promotion Act in force all roles ✓ high · www8.cao.go.jp ↗ · checked 24 Aug 2026
  3. T−184 · 1 Mar 2027 Japan Election AI Labelling & Platform Obligations (2026 Amendment) deployer · provider ✓ high · sangiin.go.jp ↗ · checked 24 Aug 2026
KG Kyrgyzstan 3 tracked Digital Code art. 197 - tell consumers they are talking to an AI, tell people they are being emotion- or biometrically classified, and label deepfakes all in force
  1. in force since 6 Feb 2026 Digital Code art. 197 - tell consumers they are talking to an AI, tell people they are being emotion- or biometrically classified, and label deepfakes chatbot · provider · deployer ✓ high · cbd.minjust.gov.kg ↗ · checked 22 Aug 2026
  2. in force since 6 Feb 2026 Digital Code arts. 191-193 - every AI system used in the country must be danger-assessed, and both the method and the result must be published provider · deployer ✓ high · cbd.minjust.gov.kg ↗ · checked 22 Aug 2026
  3. in force since 6 Feb 2026 Digital Code arts. 194-196 - self-classified high-danger AI needs a signed public declaration of conformity before first use provider · deployer ✓ high · cbd.minjust.gov.kg ↗ · checked 22 Aug 2026
KR South Korea 3 tracked Korea PIPA Art. 37-2 — rights against fully automated (AI) decisions all in force
  1. in force since 15 Mar 2024 Korea PIPA Art. 37-2 — rights against fully automated (AI) decisions provider · deployer · hiring ✓ high · law.go.kr ↗ · checked 24 Aug 2026
  2. in force since 22 Jan 2026 AI Basic Act — high-impact AI duties provider · deployer ✓ high · msit.go.kr ↗ · checked 24 Aug 2026
  3. in force since 22 Jan 2026 AI Basic Act — transparency & labelling provider · deployer · chatbot ✓ high · law.go.kr ↗ · checked 24 Aug 2026
UZ Uzbekistan 3 tracked Personal Data Law art. 24 — solely automated decisions all in force
  1. in force since 1 Oct 2019 Personal Data Law art. 24 — solely automated decisions deployer ✓ high · lex.uz ↗ · checked 21 Aug 2026
  2. in force since 21 Jan 2026 Law on Informatization art. 7¹ — AI must not harm, and no decision on AI output alone provider · deployer ✓ high · lex.uz ↗ · checked 21 Aug 2026
  3. in force since 21 Jan 2026 Administrative Liability Code art. 46² part 2 — unlawful AI processing of personal data all roles ✓ high · lex.uz ↗ · checked 21 Aug 2026
VN Vietnam 3 tracked AI-content labelling & interaction disclosure all in force
  1. in force since 1 Mar 2026 AI-content labelling & interaction disclosure provider · chatbot ✓ high · vanban.chinhphu.vn ↗ · checked 24 Aug 2026
  2. in force since 1 Mar 2026 Law on AI — risk-tiered obligations provider · deployer ✓ high · vanban.chinhphu.vn ↗ · checked 24 Aug 2026
  3. in force since 15 Aug 2026 Vietnam Decision 33 — 46 High-Risk AI Systems List provider · deployer ✓ high · vanban.chinhphu.vn ↗ · checked 24 Aug 2026
AL Albania 2 tracked Law 124/2024 art. 20 — GDPR art. 22 transposed, in force since 1 February 2025, penalised at 2 billion lekë or 4% of global turnover all in force
  1. in force since 1 Feb 2025 Law 124/2024 art. 20 — GDPR art. 22 transposed, in force since 1 February 2025, penalised at 2 billion lekë or 4% of global turnover deployer · hiring ✓ high · qbz.gov.al ↗ · checked 27 Aug 2026
  2. in force since 1 Feb 2025 Law 124/2024 art. 53 — solely automated decisions banned for police, prosecutors and security bodies, plus an exceptionless ban on discriminatory profiling deployer ✓ high · qbz.gov.al ↗ · checked 27 Aug 2026
CA Canada 2 tracked Quebec Law 25 — automated decision transparency 1 in force
  1. in force since 22 Sep 2023 Quebec Law 25 — automated decision transparency deployer · hiring ✓ high · cai.gouv.qc.ca ↗ · checked 13 Aug 2026
  2. proposed Federal AIDA (Bill C-27) — abandoned provider · deployer ✓ high · parl.ca ↗ · checked 13 Aug 2026
CL Chile 2 tracked Ley 19.628 Art. 8° bis (inserted by Ley 21.719) — right to object to solely-automated decisions and profiling next 1 Dec 2026
  1. in force since 1 Sep 2022 Código del Trabajo Cap. X — ban on discriminatory automated decision-making and algorithm access for digital-platform work deployer · hiring ✓ high · bcn.cl ↗ · checked 23 Aug 2026
  2. T−94 · 1 Dec 2026 Ley 19.628 Art. 8° bis (inserted by Ley 21.719) — right to object to solely-automated decisions and profiling deployer · provider ✓ high · bcn.cl ↗ · checked 24 Aug 2026
MX Mexico 2 tracked LFT Capítulo IX Bis — algorithmic work-management policy and human review for digital-platform workers all in force
  1. in force since 22 Jun 2025 LFT Capítulo IX Bis — algorithmic work-management policy and human review for digital-platform workers deployer · hiring ✓ high · diputados.gob.mx ↗ · checked 21 Aug 2026
  2. in force since 15 May 2026 LFT/LFDA reform — AI use of performers deployer ✓ high · diputados.gob.mx ↗ · checked 24 Aug 2026
MD Moldova 2 tracked Law 160/2026 art. 11 — a flat ban on solely automated decisions by police, prosecutors, courts and prisons all in force
  1. in force since 23 Aug 2026 Law 160/2026 art. 11 — a flat ban on solely automated decisions by police, prosecutors, courts and prisons deployer ✓ high · monitorul.gov.md ↗ · checked 25 Aug 2026
  2. in force since 23 Aug 2026 Law 195/2024 art. 22 — GDPR art. 22 transposed verbatim, in force since 23 August 2026, with the fine phased in over three years deployer · hiring ✓ high · monitorul.gov.md ↗ · checked 25 Aug 2026
RS Serbia 2 tracked Personal Data Law art. 38 — GDPR art. 22 transposed, applicable since 22 August 2019, penalty in fixed dinars all in force
  1. in force since 22 Aug 2019 Personal Data Law art. 38 — GDPR art. 22 transposed, applicable since 22 August 2019, penalty in fixed dinars deployer · hiring ✓ high · pravno-informacioni-sistem.rs ↗ · checked 26 Aug 2026
  2. in force since 22 Aug 2019 Personal Data Law art. 39 — solely automated decisions banned for police, prosecutors and prisons, plus an exceptionless ban on discriminatory profiling deployer ✓ high · pravno-informacioni-sistem.rs ↗ · checked 26 Aug 2026
SG Singapore 2 tracked Singapore — Computational Data Analysis Exception (Copyright Act 2021 s.244) all in force
  1. in force since 21 Nov 2021 Singapore — Computational Data Analysis Exception (Copyright Act 2021 s.244) provider ✓ high · sso.agc.gov.sg ↗ · checked 20 Aug 2026
  2. in force since 5 Aug 2026 Singapore MAS — Agentic AI in Scope of Supervisory Expectations (binding AI Risk Management Guidelines pending) provider · deployer ~ medium · mas.gov.sg ↗ · checked 24 Aug 2026
··· …and 53 more jurisdictions with one tracked instrument each, Algeria to Zambia 53 tracked next 10 Dec 2026
  1. in force since 11 Nov 2000 Argentina Ley 25.326 Art. 20 — judicial and administrative decisions may not rest solely on automated profiling deployer ✓ high · servicios.infoleg.gob.ar ↗ · checked 15 Aug 2026
  2. in force since 25 Jan 2008 Senegal Loi 2008-12 art. 48 — no decision with legal effects on the sole basis of automated profiling, and no judicial appraisal of conduct founded on one at all deployer · provider · hiring ~ medium · web.archive.org ↗ · checked 27 Aug 2026
  3. in force since 28 Aug 2008 Uruguay Ley 18.331 art. 16 — an automated-decision right that started out automation-blind, and the only one that makes the program itself explainable deployer ✓ high · impo.com.uy ↗ · checked 29 Aug 2026
  4. in force since 5 Mar 2009 Morocco Loi 09-08 art. 11 — neutrality of the effects of automated processing: bar on decisions grounded solely in automated profiling deployer · provider · hiring ~ medium · cndp.ma ↗ · checked 24 Aug 2026
  5. in force since 6 Jun 2010 Azerbaijan Law on Personal Data art. 7.3 — an objection right against decisions taken by information technology, whose remedy is re-processing by another method or a full stop deployer ~ medium · e-qanun.az ↗ · checked 25 Aug 2026
  6. in force since 17 Jun 2011 Angola Lei 22/11 art. 29.º — decisões individuais automatizadas: the only prohibition on the tracker that the data-protection authority can licence deployer · hiring ✓ high · apd.ao ↗ · checked 19 Aug 2026
  7. in force since 17 Aug 2012 Montenegro ZZPL art. 15a — a Directive 95/46 art. 15 prohibition, not a GDPR art. 22 right: no consent exit, no human-intervention safeguard, and no fine attached to the prohibition itself deployer ✓ high · azlp.me ↗ · checked 28 Aug 2026
  8. in force since 16 Oct 2012 Ghana Data Protection Act s. 41 — notice-based right against solely-automated decisions, plus an automatic duty to notify and reconsider deployer · provider · hiring ✓ high · dataprotection.org.gh ↗ · checked 24 Aug 2026
  9. in force since 20 Dec 2012 Ukraine Personal Data Law art. 8 — protection from automated decisions, and a right to know the mechanism deployer ✓ high · zakon.rada.gov.ua ↗ · checked 22 Aug 2026
  10. in force since 28 Jun 2013 Mali Loi 2013-015 art. 2 — a one-limb bar, stated as a founding principle, on decisions with legal effects resting solely on computerised profiling, with no exception of any kind deployer · provider · hiring ~ medium · sgg-mali.ml ↗ · checked 24 Aug 2026
  11. in force since 8 Aug 2013 Côte d'Ivoire Loi 2013-450 art. 25 — no judicial, administrative or private decision appraising human conduct may rest on automated profiling, with no carve-out at all deployer · provider · hiring ~ medium · artci.ci ↗ · checked 24 Aug 2026
  12. in force since 9 Jan 2015 Madagascar Loi n° 2014-038 art. 3 — the wide automated-decision bar stated as a founding principle, with no exception and a 5% turnover catch-all behind it deployer · provider · hiring ~ medium · digital.gov.mg ↗ · checked 24 Aug 2026
  13. in force since 10 May 2016 São Tomé e Príncipe Lei 3/2016 art. 13.º — the Lusophone prohibition without Angola's regulator escape hatch, and with a right to the reasons deployer · hiring ✓ high · redipd.org ↗ · checked 21 Aug 2026
  14. in force since 22 Jul 2016 Equatorial Guinea Ley 1/2016 art. 13(b) — impugnación de valoraciones: disclose the program, challenge any decision, but nothing forbids the machine deployer ~ medium · minfuncionpublica.gob.gq ↗ · checked 24 Aug 2026
  15. in force since 28 Jul 2016 Guinea Loi L/2016/037/AN art. 27 — the strictest Francophone automated-decision bar, with no exception of any kind and a general penalty running to 7% of turnover deployer · provider · hiring ~ medium · anssi.gov.gn ↗ · checked 23 Aug 2026
  16. in force since 9 Sep 2016 Philippines Data Privacy Act IRR Secs. 34 and 48 — automated decision-making: logic disclosure, NPC notification and the consent bar deployer · provider · hiring ✓ high · privacy.gov.ph ↗ · checked 21 Aug 2026
  17. in force since 7 Oct 2016 Türkiye KVKK art. 11(g) — a right to object with no offence of its own to enforce it deployer · hiring ✓ high · kvkk.gov.tr ↗ · checked 19 Aug 2026
  18. in force since 22 Jul 2017 Mauritania Loi n° 2017-020 art. 19 — the pre-GDPR bar with no exception at all, and a judicial limb the others do not have deployer · hiring ~ medium · apd.mr ↗ · checked 24 Aug 2026
  19. in force since 15 Jan 2018 Mauritius Data Protection Act 2017 s. 38 — the African automated-decision bar that a criminal penalty actually backs deployer · hiring ✓ high · dataprotection.govmu.org ↗ · checked 19 Aug 2026
  20. in force since 20 Apr 2018 Benin Code du numérique art. 401 — a Directive-shaped bar widened to significant effects, with profiling named, mandatory safeguards inside the exception and a full logic-disclosure right deployer · provider · hiring ~ medium · apiprod.apdp.bj ↗ · checked 24 Aug 2026
  21. in force since 12 Mar 2019 Kosovo Law 06/L-082 art. 21 — GDPR art. 22 with the words «legal» and «significantly» missing from the trigger, and no fine attached to the right itself deployer ✓ high · gzk.rks-gov.net ↗ · checked 29 Aug 2026
  22. in force since 3 May 2019 Uganda Data Protection and Privacy Act s. 27 — notice-based right against solely-automated decisions, an automatic duty to notify and reconsider on a twenty-one-day clock, and a fourteen-day route to the regulator deployer · provider · hiring ✓ high · ict.go.ug ↗ · checked 17 Aug 2026
  23. in force since 29 Oct 2019 Togo Loi 2019-014 art. 27 — a judicial limb, a legal-effects limb and a contract carve-out: the Directive 95/46 shape, not the wider ECOWAS one deployer · provider · hiring ~ medium · jo.gouv.tg ↗ · checked 24 Aug 2026
  24. in force since 7 Nov 2019 Republic of the Congo Loi n° 29-2019 art. 13 — the Directive-shaped bar whose fine arrives only if the controller defies the formal notice deployer · provider · hiring ~ medium · sgg.cg ↗ · checked 24 Aug 2026
  25. in force since 25 Nov 2019 Kenya Data Protection Act s. 35 — right against solely-automated decisions, with written notification and a right to reconsideration deployer · provider · hiring ✓ high · odpc.go.ke ↗ · checked 24 Aug 2026
  26. in force since 24 Feb 2020 North Macedonia ZZLP art. 26 — GDPR art. 22 transposed almost word for word, in force since 24 February 2020, with a 4%-of-income fine and no euro alternative underneath it deployer ✓ high · azlp.mk ↗ · checked 28 Aug 2026
  27. in force since 1 Jul 2020 South Africa POPIA s. 71 — bar on decisions taken solely on automated processing that profiles the data subject deployer · provider · hiring ✓ high · gov.za ↗ · checked 16 Aug 2026
  28. in force since 30 Mar 2021 Burkina Faso Loi 001-2021/AN art. 15 — a two-limb bar with no exception, backed by art. 19's reasoning and artificial-intelligence disclosure right and by art. 31's prior authorisation for predictive-AI decision support deployer · provider · hiring ~ medium · web.archive.org ↗ · checked 24 Aug 2026
  29. in force since 1 Apr 2021 Zambia Data Protection Act 2021 s. 62 — the GDPR-shaped automated-decision bar that no offence backs deployer · hiring ✓ high · parliament.gov.zm ↗ · checked 22 Aug 2026
  30. in force since 16 Apr 2021 Cabo Verde Lei 133/V/2001 art. 23.º — the Lusophone prohibition rewritten to the GDPR's shape, and the second the regulator can licence deployer · hiring ✓ high · cnpd.cv ↗ · checked 23 Aug 2026
  31. in force since 15 Oct 2021 Rwanda Law No. 058/2021 art. 21 — right not to be subject to a decision based on automated data processing deployer · provider · hiring ✓ high · cyber.gov.rw ↗ · checked 20 Aug 2026
  32. in force since 17 Oct 2022 Indonesia UU 27/2022 (PDP Law) Arts. 10 and 34 — objection to solely-automated decisions and mandatory impact assessment deployer · provider ✓ high · jdih.komdigi.go.id ↗ · checked 24 Aug 2026
  33. in force since 16 Dec 2022 Niger Loi 2022-59 art. 52 — automated individual decisions: a two-limb bar, a right to know and contest the reasoning, and an express artificial-intelligence disclosure duty at collection deployer · provider · hiring ~ medium · hapdp.ne ↗ · checked 23 Aug 2026
  34. in force since 13 Mar 2023 Democratic Republic of the Congo Code du numérique art. 209 — the logic behind the decision must be disclosed, but no decision is ever forbidden deployer ✓ high · are.gouv.cd ↗ · checked 18 Aug 2026
  35. in force since 1 May 2023 Tanzania Personal Data Protection Act s. 36 — rights in relation to automated decision making, with a duty to notify and reconsider deployer · provider · hiring ✓ high · pdpc.go.tz ↗ · checked 22 Aug 2026
  36. in force since 8 Jun 2023 Mozambique Malabo Convention art. 14(5) — the automated-decision bar that binds by treaty, in a country with no data-protection law deployer · hiring ~ medium · au.int ↗ · checked 24 Aug 2026
  37. in force since 8 Jun 2023 Namibia Malabo Convention art. 14(5) — the second country where the automated-decision bar arrives only by treaty deployer · hiring ~ medium · au.int ↗ · checked 24 Aug 2026
  38. in force since 12 Jun 2023 Nigeria Nigeria Data Protection Act s. 37 — right against solely-automated decisions, with a duty to provide human intervention on request deployer · provider · hiring ✓ high · ndpc.gov.ng ↗ · checked 22 Aug 2026
  39. in force since 15 Jul 2023 Gabon Loi n° 025/2023 art. 77 — the recast that carries the Francophone family's only statutory definition of artificial intelligence deployer · provider · hiring ~ medium · journal-officiel.ga ↗ · checked 24 Aug 2026
  40. in force since 21 Aug 2023 Thailand Royal Decree on Digital Platform Service Businesses Sec. 17 — publication of the main parameters of ranking, advertising and review algorithms provider · deployer ✓ high · etda.or.th ↗ · checked 16 Aug 2026
  41. in force since 1 Sep 2023 Switzerland revFADP art. 21 — the automated-decision article that never prohibits anything deployer · hiring ✓ high · fedlex.admin.ch ↗ · checked 23 Aug 2026
  42. in force since 25 Jan 2024 Central African Republic Loi 24.001 art. 30 — the access limb without the bar: the only tracked statute that lets you contest an automated decision but never forbids one deployer ~ medium · web.archive.org ↗ · checked 26 Aug 2026
  43. in force since 1 Mar 2024 Georgia Law on Personal Data Protection art. 19 — a GDPR-shaped automated-decision right whose exceptions cover only profiling, whose safeguards must be asked for, and whose fine tops out at GEL 20 000 deployer ✓ high · matsne.gov.ge ↗ · checked 25 Aug 2026
  44. in force since 23 Dec 2024 Cameroon Loi n° 2024/017 art. 44 — the first GDPR-shaped bar in Francophone Africa, in the only African statute that makes profiling itself a crime deployer · provider · hiring ~ medium · prc.cm ↗ · checked 24 Aug 2026
  45. in force since 24 Jul 2025 Algeria Loi 18-07 art. 45 bis 1 (ex-art. 11) — the automated-decision rule now reaches only criminal-justice processing; Loi 25-11 repealed the general-purpose rule outright deployer ~ medium · joradp.dz ↗ · checked 23 Aug 2026
  46. in force since 4 Oct 2025 Bosnia and Herzegovina ZZLP arts. 24 and 67 — GDPR art. 22 and LED art. 11 in one state-level act since 4 October 2025, with «participation of a natural person in the decision» in place of human intervention deployer ✓ high · azlp.ba ↗ · checked 28 Aug 2026
  47. in force since 1 Jan 2026 UAE DIFC Data Protection Regulation 10 provider · deployer ✓ high · difc.com ↗ · checked 22 Aug 2026
  48. in force since 22 Jan 2026 Peru AI Law 31814 + Reglamento — risk-based regime provider · deployer ✓ high · busquedas.elperuano.pe ↗ · checked 20 Aug 2026
  49. in force since 20 Feb 2026 India IT Rules — synthetic-content (deepfake) labelling provider · deployer · chatbot ✓ high · meity.gov.in ↗ · checked 24 Aug 2026
  50. in force since 10 Mar 2026 Burundi Loi 1/03 arts. 19-20 — the automated decision a human must retake from scratch, and the first statute here to name AI in an operative duty deployer ✓ high · arct.gov.bi ↗ · checked 24 Aug 2026
  51. in force since 29 Jul 2026 DE Germany AI Market Surveillance Act (KI-MIG) provider · deployer ✓ high · gesetze-im-internet.de ↗ · checked 24 Aug 2026
  52. in force since 12 Aug 2026 Saudi Arabia Saudi Arabia — AI Training Exemption (Copyright Law Art.26) provider ✓ high · uqn.gov.sa ↗ · checked 24 Aug 2026
  53. T−103 · 10 Dec 2026 AU Australia Automated Decision-Making Transparency (Privacy Act APP 1.7–1.9) provider · deployer ✓ high · legislation.gov.au ↗ · checked 24 Aug 2026